458bc0c98cd68de78cfcdcfbecf6bbce1a6db9ea89fd8e85f7f86ae4d1ea5f0e

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 13:03

Target
execute at ur own risk.bat
Size 1KB
Sample260702-qagblabz2r
SHA256 458bc0c98cd68de78cfcdcfbecf6bbce1a6db9ea89fd8e85f7f86ae4d1ea5f0e
MD5 e0dcbdc004f26d0a10504fd46158de71
SHA1 fc9a360a6fd252f68f824578cbf3d328d4ceba87
SHA512 5e6f19aa0a0d96836c4ac354c0a983420a772e8eef83002db601b0445ab34cdc518c4cfda9ba5e51caaaa3d538b8fda45242bff2b9f0efe1e9c09857c1d7c205
TLSH
T1D7310326B6A2ED8583F95AA00D7D20E1F000B6D36C4B7E8DB10FF078572D6C17A2DC45
MD5 SHA1 SHA512 TLSH

Score

1^/10

defense_evasion

Delays execution with timeout.exe 5 IoCs

defense_evasion

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2548 wrote to memory of 5956	2548	cmd.exe	89
PID 2548 wrote to memory of 5456	2548	cmd.exe	90
PID 2548 wrote to memory of 2564	2548	cmd.exe	91
PID 2548 wrote to memory of 1876	2548	cmd.exe	92
PID 2548 wrote to memory of 5004	2548	cmd.exe	93

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\execute at ur own risk.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2548
- C:\Windows\system32\timeout.exe
  timeout /t 2 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:5956
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:5456
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2564
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1876
- C:\Windows\system32\timeout.exe
  timeout /t 3 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:5004